$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json) Hash identifier: +9lck8neIGqbKyI5Pnz8DOrlHpZyXHV6Gps+47eDL0g= Subject key identifier: 66:49:37:3B:09:AC:84:8C:E4:6D:B3:50:E8:DF:85:63:B3:95:D4:9D Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584B80B7690CB848994859FB4840 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33139 IP address blocks: 66.49.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:69:0c:b8:48:99:48:59:fb:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=3e8ea993-17ee-43c3-b2f5-15107b75c2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:34:2b:a5:d3:d0:01:8f:65:75:37:cb:09:44: 6f:ec:51:91:aa:b3:f9:ce:c7:10:d7:bf:83:ed:f7: 5e:17:ea:94:ee:70:22:5f:b7:5f:50:88:54:b3:b0: 61:b5:74:e0:86:6f:94:5f:43:ca:d1:36:22:4f:4f: b6:93:54:52:a7:fd:d1:7a:b7:43:f1:a6:1f:e5:c0: 6e:02:7f:a8:e8:9f:cd:44:0c:a8:08:11:6f:e3:85: 15:c8:95:d1:65:e0:42:a6:47:3f:49:81:a9:5c:54: 4f:c8:ff:7b:0f:6b:a9:16:8b:ee:ef:e1:db:9f:a9: b6:c1:22:af:80:0e:e4:cf:ab:6b:4c:83:84:7f:5e: 08:19:8d:b4:a5:75:af:1d:95:03:e8:66:72:e1:94: 29:31:ed:d0:77:fb:b5:4d:6a:e5:3a:bc:ce:ad:a7: 1d:61:bd:12:64:27:7e:9e:cb:a8:49:bc:bb:93:2b: c0:0d:dd:6e:b3:36:4e:0b:4b:b4:ee:05:0e:24:59: 11:8a:55:e5:9c:6d:c4:a3:e7:f2:a7:72:32:05:83: 04:56:47:5f:eb:74:50:b1:c5:44:9b:83:ed:51:59: 14:ac:47:60:d2:65:4b:6b:19:75:c3:b5:85:8d:c5: a8:49:d7:94:bc:ab:73:bd:00:96:72:70:2c:04:c6: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:37:3B:09:AC:84:8C:E4:6D:B3:50:E8:DF:85:63:B3:95:D4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:94:e8:71:8a:1f:de:70:c5:15:9e:52:cb:cf:69:91:c1:3f: 03:47:cc:eb:c0:04:24:86:c1:34:73:a4:be:07:0c:af:6e:4c: 7e:12:91:e8:a0:9b:00:a9:e0:75:48:4f:f6:0c:14:c5:d7:0b: a4:31:f1:bd:1a:20:26:6c:0d:5a:98:4c:d8:db:39:fa:cc:b1: de:20:3f:29:1b:f3:ae:9e:06:7f:a1:94:76:0f:60:8f:a4:23: ef:52:8b:d2:62:49:70:7f:1c:6d:cb:c1:1f:8c:55:1f:06:fe: 78:8d:94:84:60:0b:f6:e5:02:fc:df:e8:f4:61:1d:c0:de:77: 97:c4:6c:e1:31:ea:63:68:2e:69:f7:8a:21:57:80:1c:48:dd: c8:c8:93:e9:b8:e5:41:4c:62:ed:e1:20:5e:73:80:68:1a:2f: 6f:d6:32:97:db:16:70:57:b5:01:b5:a8:18:88:d0:b7:e3:ea: 13:57:6f:6a:54:6a:80:a6:38:04:1e:6b:84:98:93:78:4f:c4: 5c:b5:d4:cb:3c:b6:38:84:e1:f4:77:7b:7d:98:fe:31:da:c5: f2:ec:ac:53:71:4e:1e:8d:94:a2:dd:13:a4:94:af:47:6d:42: e0:e0:bd:37:e8:d7:c7:e1:6b:87:58:5a:26:62:04:9c:f8:86: dd:4c:44:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2kMuEiZSFn7SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk M2U4ZWE5OTMtMTdlZS00M2MzLWIyZjUtMTUxMDdiNzVjMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TQrpdPQAY9ldTfLCURv7FGRqrP5zscQ17+D 7fdeF+qU7nAiX7dfUIhUs7BhtXTghm+UX0PK0TYiT0+2k1RSp/3RerdD8aYf5cBu An+o6J/NRAyoCBFv44UVyJXRZeBCpkc/SYGpXFRPyP97D2upFovu7+Hbn6m2wSKv gA7kz6trTIOEf14IGY20pXWvHZUD6GZy4ZQpMe3Qd/u1TWrlOrzOracdYb0SZCd+ nsuoSby7kyvADd1uszZOC0u07gUOJFkRilXlnG3Eo+fyp3IyBYMEVkdf63RQscVE m4PtUVkUrEdg0mVLaxl1w7WFjcWoSdeUvKtzvQCWcnAsBMY8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZJNzsJrISM5G2zUOjfhWOzldSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvM2ExNjI4OGEtYzQ0MS0z MTNhLWE0MDAtMjRmOWQ1NDRjZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+U6HGKH95wxRWeUsvPaZHBPwNHzOvABCSGwTRzpL4HDK9uTH4Skeig mwCp4HVIT/YMFMXXC6Qx8b0aICZsDVqYTNjbOfrMsd4gPykb866eBn+hlHYPYI+k I+9Si9JiSXB/HG3LwR+MVR8G/niNlIRgC/blAvzf6PRhHcDed5fEbOEx6mNoLmn3 iiFXgBxI3cjIk+m45UFMYu3hIF5zgGgaL2/WMpfbFnBXtQG1qBiI0Lfj6hNXb2pU aoCmOAQea4SYk3hPxFy11Ms8tjiE4fR3e32Y/jHaxfLsrFNxTh6NlKLdE6SUr0dt QuDgvTfo18fha4dYWiZiBJz4ht1MRKc= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:00 2025 by rpki-client